Nice! We managed to close down many of the configuration loopholes by really validating the YAML file, but environment variables are hard to control. And secrets go in there and there are so many ways to configure the block stores, so I'm not sure how we could nail that area down.